Privacy Policy 💩

01. Quick summary

We built Poop Popper to collect as little as possible. Here is the short version:

The sections below give the full detail.

02. Information we collect

Information you provide

Display name. When you first open the Game, you are asked to choose a short display name (up to 16 letters, numbers, and spaces). The Game suggests a randomly generated name for you, and you can accept it, roll a new one, or type your own. Whatever you choose is saved on your device alongside your game progress.

You decide what goes in that field. You do not need to use your real name, and we ask you not to: a generated name works exactly as well. If you do type your real name, or anything else that identifies you, that text becomes personal data and is stored as described in this policy. You can change it later, or delete it - see How to delete your data.

The Game does not ask you to create an account, or to give your email address, date of birth, phone number, or any similar personal detail.

If you contact us by email, we receive your email address and whatever information you choose to include in your message, so that we can reply.

Game progress

Your game progress (for example in-game currency, upgrade levels, achievements, unlocked items, and preferences) and your display name are saved only on your device. The Game does not create an account and does not send your save to us, so we do not hold a copy of it.

Information collected automatically

When the Game connects to our backend and app-store services, certain technical data is processed automatically, mostly by our service providers, so the service can function:

• Device and app information, such as device model, operating system version, language, and app version.
• Network information, such as your IP address (used to route requests and for security; it is not used to build an advertising profile).
• Service identifiers generated by Firebase, such as an installation or instance identifier.
• Basic technical logs and timestamps needed to operate, secure, and debug the backend.

Analytics

To understand how the Game is used and to improve it, we use Google Analytics for Firebase. Analytics is on by default. When you play, the Game records analytics events - for example app opens, which features and screens you use, and in-game progress and milestones - along with the technical device and app information listed above and a Firebase-generated app instance identifier. This tells us, in aggregate, which features are popular, where players get stuck, and whether the Game is stable.

We do not use a crash-reporting or diagnostics service. The Game does not send us crash dumps, stack traces or error logs.

Our analytics is set up to be privacy-protective:

• No advertising identifier. We do not collect the Android Advertising ID (AAID) or Apple's advertising identifier (IDFA), and Firebase Analytics is blocked from accessing them. Your activity is not used to build an advertising or marketing profile.
• No cross-app or cross-site tracking. Analytics data is used only within the Game; it is not combined with data from other apps or websites to track you.
• Coarse location only. Any location is estimated at a country or region level from your IP address for statistics. We do not collect precise or GPS location, and we do not use analytics data to identify you personally.

You can turn analytics off at any time in the Game: Settings > ANALYTICS. Switching it off stops collection immediately and clears the app instance identifier described above. You do not need to contact us, and the rest of the Game is unaffected. You can also ask us to stop processing your data for analytics - see Your privacy rights.

Purchase information

If you make an in-app purchase, the purchase is processed by the Apple App Store or Google Play. We receive a confirmation of the transaction (for example which product was bought and whether it succeeded) so we can unlock your item. We do not receive or store your payment card number, billing address, or full payment details. Those are handled by Apple and Google under their own privacy policies.

What we do not collect

For clarity, the Game does not collect any of the following:

• Your email address, password, or social-media login.
• Your real name: we only store the display name you choose, whatever you decide that should be.
• Precise or GPS location.
• Your contacts, photos, microphone, or camera.
• Advertising identifiers for cross-app tracking (the Game shows no ads).
• Special categories of data (such as health, religion, or biometric data).

03. How we use information

We use the limited information described above only to:

• Provide and run the Game, including saving your progress on your device.
• Process and deliver your in-app purchases.
• Keep the Game secure, prevent fraud and abuse, and enforce our terms.
• Understand how the Game is used, in aggregate, so we can improve features, fix problems, and keep it stable (analytics).
• Diagnose problems, fix bugs, and keep the service reliable.
• Respond to your questions and support requests.
• Comply with our legal obligations (for example keeping purchase records for tax purposes).

We do not use your information for advertising or to build a marketing profile about you, and we do not make automated decisions that produce legal or similarly significant effects about you. Our analytics is aggregated and used only to run and improve the Game.

04. Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases:

05. In-app purchases

The Game offers optional in-app purchases (for example in-game currency packs and one-time upgrades) through Unity In-App Purchasing, using the Apple App Store and Google Play billing systems. All payments are processed by Apple or Google. Your relationship for the payment itself is with the relevant app store, and its terms and privacy policy apply to that transaction. We only receive the result of the purchase so we can grant the item.

06. Third-party services

We use a small number of trusted providers ("processors") to run the Game. These providers may process your data on our behalf, and some may process it on servers outside your country. Each has its own privacy policy.

We use Google Analytics for Firebase for product analytics, as described in the Analytics section. We do not use advertising networks or advertising-based analytics in the Game.

07. How we share information

We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising.

We share information only:

• With the service providers listed above, so they can perform services for us.
• When required by law, legal process, or a valid request from a public authority.
• To protect the rights, safety, and property of ShipCore, our players, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you and any successor will be bound by this policy.

08. International data transfers

Our providers (including Google, Apple, and Unity) may process data on servers located outside the EEA, including in the United States. Where personal data is transferred outside the EEA or the United Kingdom, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent recognized transfer mechanism.

09. Data retention

We keep your data only as long as needed for the purposes described in this policy:

• Analytics data is retained for a limited period, in line with our Google Analytics for Firebase configuration (by default up to 14 months), after which it is deleted or kept only in aggregated form that does not identify you.
• Local game data stays on your device until you delete it in the Game, delete the app, or clear its data.
• Purchase records may be retained as required for accounting and legal obligations.
• Support emails are kept for as long as needed to handle your request and for a reasonable period afterward.

When data is no longer needed, we delete or anonymize it.

10. Security

We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

11. Your privacy rights

If you are in the EEA or the United Kingdom (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Request portability of data you provided to us, in a machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at support@pooppopper.com. Your game progress and display name stay on your device, so we do not hold them. For other data we may need additional information to locate it (for example device details), and in some cases we may be unable to identify you in our systems, in which case we will tell you.

If you are in the Netherlands, you can contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you are elsewhere in the EEA or the UK, you may contact your local authority.

If you are in California (CCPA and CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect and how we use them.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information, so there is nothing to opt out of.
• Not be discriminated against for exercising your rights.

To make a request, email support@pooppopper.com. We will verify your request using the information reasonably available to us.

12. Children's privacy

Poop Popper is made for a general audience and is not directed to children under 13. It is rated for ages 13 and up on the App Store and Google Play, and we do not knowingly collect personal data from children under 13, or under the age of digital consent in their country (which is 16 in the Netherlands).

The Game is built so that it does not need personal data from anyone:

• No account. No email address, no password, no phone number, no date of birth.
• No advertising. The Game shows no ads and contains no advertising SDKs. It does not collect the Android Advertising ID (AAID) or Apple's advertising identifier (IDFA).
• No tracking or profiling. We do not track players across other apps or websites, and we do not build advertising or marketing profiles. Analytics is never used to target anyone.
• No social features. There is no chat, no friend list, no messaging between players, and no way for one player to see another player's name or progress.
• Never sold or shared. We do not sell or rent personal data, and we do not share it with third parties beyond the service providers listed in this policy.

The display name is free text and is only ever shown inside that player's own copy of the Game. Please choose a nickname rather than a real name, and never enter an address, school, email address or phone number. A name can be changed at any time in the Game's Stats screen, or removed together with everything else - see How to delete your data.

Parents and guardians: if you believe a child under 13 has given us personal data, email support@pooppopper.com and we will delete it promptly. You do not need an account to ask, and we will not request more personal data than we need to find and delete the record. You can also delete everything from inside the Game, at Settings → MY DATA → DELETE. If we learn that we have collected personal data from a child in a way that requires parental consent we did not have - under COPPA in the United States or the GDPR in the European Union - we will delete it promptly.

13. How to delete your data

You can remove your data in the following ways:

• In the Game (everything at once): open Settings → MY DATA → DELETE and confirm. This removes the save on your device and resets the analytics app instance identifier described in the Analytics section. It works without an internet connection and cannot be undone. Anything you bought with real money, including Golden Rolls and everything you spent them on, cannot be recovered.
• Removing the Game: deleting the Game from your device, or clearing its data in your device settings, also removes the save on that device.
• By email: for any other data we hold about you, such as emails you sent us, email support@pooppopper.com - see Your privacy rights.
• Purchase records: these are held by Apple or Google under their own policies; you can manage your purchase history through your app-store account.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the Game or in the law. When we do, we will revise the "Last updated" date at the top. If the changes are significant, we will provide a more prominent notice, such as an in-app message or a note on the app-store listing. We encourage you to review this policy periodically.

15. Governing law

This Privacy Policy and any matter relating to it are governed by the laws of the Netherlands and, where applicable, the EU General Data Protection Regulation, without prejudice to any mandatory consumer-protection rights you have under the law of your country of residence.

16. Contact us

If you have questions, requests, or concerns about this Privacy Policy or your data, contact:

Merknu is established in the Netherlands, so no Article 27 EU representative is required.

If you are in the EEA and believe we have not handled your data lawfully, you may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in your country of residence.